Blockstream Jade
Best for verifiable firmware openness
How it rates
- Firmware source published in a public repository
- Device security or specification page published
- Technical documentation reachable without an account
- No dedicated security or audit disclosure identified at this check
Each indicator scores 2, 1 or 0. A pillar is the points earned over the points available; the overall score is the weighted sum. Every source below is public — check any of them yourself.
- MetFirmware source published in a public repository
Vendor repository reachable at this check.
github.com/Blockstream/Jade - MetDevice security or specification page published
Security or specification page reachable at this check.
blockstream.com/jade/ - Not metIndependent security research or audit programme published
No published security research or audit programme identified at this check.
- MetTechnical documentation reachable without an account
Documentation open at this check.
blockstream.com/jade/ - MetVendor organisation identifiable from the repository
Repository published under the vendor organisation (Blockstream).
github.com/Blockstream/Jade
- Met
- Met
- Met
- Met
- MetPurchase information viewable without an account
No account required to reach the shop at this check.
blockstream.com/jade/
- Met
- MetFirmware repository is the vendor's own
Repository published by the vendor.
github.com/Blockstream/Jade - Met
- MetDocumentation site separate from marketing
Dedicated documentation or support resource published.
blockstream.com/jade/ - Met
- Met
- MetVendor entity identifiable
Vendor organisation identifiable as Blockstream.
github.com/Blockstream/Jade - Not metSecurity or disclosure page published
Not identified at this check.
- Met
- Met
- Met
- Met
- Met
- Met
- Met
A fully open-source Bitcoin and Liquid wallet that replaces the secure element with a blind-oracle PIN model, with QR air-gap on the Plus model.
Our assessment
Blockstream Jade is the only device here that ships without a secure element, and the omission is deliberate. Secure-element firmware is closed by the chip vendor, so including one would have made a fully open-source device impossible. Jade replaces it with a blind-oracle PIN scheme instead.
How the blind oracle works
The private key is encrypted and the decryption key is split: one part stays on the device, the other is retrieved from a Blockstream-operated oracle through the companion app. The oracle never learns the key or the PIN — it only rate-limits attempts, which is the job a secure element normally does. The trade is that a physical attacker holding the device alone is stopped by a remote service rather than by silicon.
What that buys you
Complete openness. There is no closed component anywhere in the signing path, the hardware design is public, and the device is simple enough to build yourself. For a reader who treats unauditable code as the primary risk rather than physical attack, this is the strictest position in the comparison.
Bitcoin and Liquid, with real multisig
Jade covers Bitcoin and Liquid, works over QR air-gap on the Plus model, and pairs cleanly with Sparrow and Electrum for multisig and coin control. That external-wallet compatibility matters more than the device's own app — it means Jade can be one signer among several rather than a single point of failure.
Who it suits
Jade fits Bitcoin holders who prioritise full auditability and multisig setups, particularly as one key in a Sparrow or Nunchuk quorum. Buyers whose threat model centres on physical device theft should prefer a secure-element device such as Coldcard or BitBox.
How rivals compare
| Service | Score | Best for | |
|---|---|---|---|
| Trezor | 9.9 | verifiable firmware openness | Read → |
Frequently asked
Does this score mean Blockstream Jade is secure?
No. It measures what a buyer can verify before purchase: published firmware source, documented security claims, and open documentation. Physical security is not tested by us and is not scored.
Why does firmware openness matter so much here?
It is the one substantive security property an outsider can check without specialist equipment. Everything else on a hardware wallet requires trusting the vendor or a third-party teardown.
What would raise this score?
Publishing firmware source, a dedicated security or audit page, and open technical documentation at stable public addresses — all of which are checkable by anyone.